Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File:                     i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier:          hkiJUamUqRolORMxmWHQzpqSEJZBBGJHe+EfaZd48n4=
Subject key identifier:   DB:2E:0E:00:A7:D7:4D:F0:79:E2:89:64:03:0F:AF:DB:45:8C:B2:BA
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer:       /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial:       01962E98EFE6B2576F975A0EB82683C38913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
                          2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: /Ogn2aIRk3qf3Zb0nS3h4+GwU3wXsS9tk2khrCKCUi8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ef:e6:b2:57:6f:97:5a:0e:b8:26:83:c3:89:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=db2e0e00a7d74df079e28964030fafdb458cb2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:82:c3:e0:bf:c7:67:ae:a0:49:e4:22:85:
                    4f:a9:ac:7f:d5:c3:e1:1a:ba:ad:2a:01:c0:ea:cd:
                    1f:6a:43:b7:ab:80:d1:7c:30:d5:5a:8e:45:f5:be:
                    6c:7b:a4:53:7a:b2:6b:59:b5:e2:96:94:24:34:7e:
                    1f:33:fd:57:77:80:f5:61:8d:3e:2b:30:81:03:e0:
                    bf:3f:6e:6f:de:e7:12:d0:32:57:1a:c9:5a:ae:f8:
                    1d:f3:76:89:db:ba:77:a4:b9:92:06:6d:1b:13:5d:
                    1c:6e:67:3b:23:19:64:be:fb:35:6d:c1:01:45:10:
                    63:81:df:f4:fe:b4:e6:d8:e2:e5:06:d9:e2:8f:dc:
                    41:f7:ef:67:f6:dd:fe:f8:73:8b:b1:67:a9:9f:a0:
                    38:f3:f6:ab:38:43:72:af:fc:8b:f5:4f:67:a3:b1:
                    7e:32:a7:f3:19:bf:d5:c3:6b:01:1a:18:74:e7:f3:
                    98:92:cb:a3:74:9e:34:04:36:95:92:f9:a0:cd:37:
                    ea:14:7a:da:77:6c:5a:9d:68:ff:3c:d9:71:d0:10:
                    e2:e1:a9:10:79:49:21:fc:ff:81:d6:e7:fa:a4:eb:
                    44:31:bf:bc:fa:41:17:16:52:35:99:58:95:28:a1:
                    08:cd:ec:7d:93:f9:4d:e0:81:eb:a3:49:d5:95:f3:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2E:0E:00:A7:D7:4D:F0:79:E2:89:64:03:0F:AF:DB:45:8C:B2:BA
            X509v3 Authority Key Identifier:
                keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2b:e5:e4:41:9a:51:c9:37:0f:cd:9a:28:5a:a3:91:73:b4:
         17:69:b5:fe:39:8b:65:0d:fd:95:91:d0:a5:c3:67:68:cd:b6:
         6e:fb:3f:0d:31:9f:76:45:ec:e9:71:41:3a:c1:20:cc:a6:ee:
         71:ab:c2:47:e9:42:65:36:24:92:83:99:22:f1:92:83:d4:78:
         76:da:f5:fb:89:98:64:0c:e1:8c:82:89:31:94:29:90:e7:f3:
         0c:af:35:1c:0b:6e:aa:19:23:67:c7:a1:82:ae:88:41:b0:2a:
         7b:b7:d0:a6:c6:e7:da:13:9a:2f:7d:68:bd:ff:e0:fd:46:d1:
         45:58:4b:f9:9b:6d:10:13:9b:27:4e:07:4e:17:ed:ad:de:be:
         a5:bd:cc:92:c5:be:b2:d1:2c:c8:c8:e7:bd:bd:ea:82:2b:35:
         33:f1:65:17:a3:dc:9c:28:23:48:55:8c:1c:a8:e4:6d:de:f6:
         d6:23:e8:67:90:41:e5:4e:63:55:f1:5f:43:83:9c:67:a7:4c:
         36:34:91:fb:fa:ff:0d:ee:33:e3:2d:9d:ba:92:de:53:03:4d:
         99:77:bf:59:fa:54:7e:d7:33:36:06:62:5a:ab:e4:5d:65:0b:
         fd:6f:9c:91:a1:ec:8d:c8:92:6a:32:1e:ad:40:fe:6b:c1:85:
         e3:bc:55:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----